Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
File: LdWWwep-y7G-F3f8DTjtBspA6r4.mft (raw, json)
Hash identifier: Mo6fAlUjkl9Miud9bcBR6JmZpFTbIGFfzUdC+w9iHO4=
Subject key identifier: F8:3E:AF:DF:22:01:87:50:F3:84:C8:08:AB:8E:60:9E:AA:FB:C8:E4
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 01977978760EC8EA9F86D0AA1181A7763B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
Manifest number: 0F54
Signing time: Mon 16 Jun 2025 16:00:26 +0000
Manifest this update: Mon 16 Jun 2025 16:00:26 +0000
Manifest next update: Tue 17 Jun 2025 16:00:26 +0000
Files and hashes: 1: LdWWwep-y7G-F3f8DTjtBspA6r4.crl (hash: 3N4B5/qErGsR/mQVYlmL5tyDmORjwFGvcanf0JhjeBs=)
2: lPP1CTZE_I869rs5FvdeSS4FA3k.roa (hash: qLXwzivmvmSSh7sbcIlPZozy/8eLL4zZEt9Q9nGGudc=)
3: zanD_Us8dBGhViwVbHdjZ1KnOyY.roa (hash: 8YK5aDnlFgCf1IslrmnzJ2YHYk3ZAoh0qEssJ/f413k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:76:0e:c8:ea:9f:86:d0:aa:11:81:a7:76:3b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Jun 16 16:00:26 2025 GMT
Not After : Jun 17 16:00:26 2025 GMT
Subject: CN=f83eafdf22018750f384c808ab8e609eaafbc8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:f5:d7:45:07:2e:8e:52:6e:e2:98:39:b5:
6d:59:ba:4c:c5:44:dd:f6:8e:83:c6:13:91:7c:59:
2f:76:05:f5:f6:ea:f4:9d:bd:61:fc:a5:cf:ce:8d:
b5:39:81:a7:2a:f9:89:fd:7e:a9:d6:ec:b5:f5:9c:
e3:e7:19:b2:d9:30:1a:ef:ce:ba:b1:4a:7d:f9:70:
6b:ff:7d:b1:cd:e1:c9:d6:9e:b8:d5:ae:e9:f7:b7:
b2:24:d8:67:c1:4c:0e:e2:e8:a2:55:48:63:b1:70:
ca:b7:55:df:77:6e:2e:66:ac:20:99:98:97:c9:56:
b0:f6:5e:c6:3b:e0:75:83:d7:02:d8:3d:f5:3e:e0:
95:81:fa:ff:03:d8:f2:bb:c7:90:60:45:44:5a:cc:
ce:82:a3:50:e0:46:1e:09:90:70:19:e1:26:4c:8d:
c8:ac:84:b0:e3:20:70:96:5c:56:ff:96:e8:8f:0a:
46:d1:6e:15:01:71:58:81:43:9a:b6:5b:20:ba:dc:
11:aa:40:9d:6a:77:39:aa:89:90:58:7d:94:b0:eb:
35:10:77:a7:10:ba:4e:03:6d:14:8e:5f:29:d9:50:
55:b5:06:c8:f9:64:1f:82:5c:bf:f9:da:e4:5d:6e:
d6:10:ad:e2:c1:8d:c6:6c:43:05:bc:36:fe:78:eb:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3E:AF:DF:22:01:87:50:F3:84:C8:08:AB:8E:60:9E:AA:FB:C8:E4
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cb:35:02:f9:e1:d7:8b:ca:20:75:1a:16:89:46:16:51:a7:
47:21:d9:3e:9f:29:9b:6f:dd:9b:03:f2:87:fe:cf:1c:f0:45:
d9:fd:59:1f:f0:53:cc:dd:ba:0c:ae:f0:53:ca:6f:0e:ef:94:
4e:72:ca:ec:eb:9d:ba:eb:c7:6c:1c:8c:6a:f3:02:b2:d3:10:
a7:42:aa:ac:5c:fe:d8:16:fd:3b:4d:a2:82:8e:e3:01:81:1a:
04:f9:f6:55:25:bf:f4:99:a3:7e:47:4c:4f:70:7e:63:c9:4f:
13:5b:f5:8b:a9:f1:6c:df:cc:fe:73:60:02:b0:f6:a0:b2:fa:
a1:a9:5b:52:7a:29:c3:68:c6:cf:f8:0e:ca:62:39:cc:68:60:
6c:8f:67:fa:49:22:3a:f8:b5:8e:51:0c:3b:04:3b:c0:c4:cb:
64:ac:4b:ec:57:a2:95:8b:22:de:30:a5:cf:49:34:e8:8a:4d:
65:37:15:bd:c0:36:cd:ec:b0:16:ee:0f:2f:c0:60:a6:70:d8:
f5:42:fb:1a:6a:9c:84:0a:b5:61:f8:44:8a:80:72:4a:fb:81:
dc:3c:7e:2d:5a:df:4b:50:3f:f0:df:a6:33:cf:0f:d5:9b:29:
58:db:52:b9:2f:b2:9c:71:cb:15:03:2b:82:2c:52:53:d4:97:
1d:92:15:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:36:36 2025 by rpki-client